Decrypted content key from a Widevine License. Holds key type, KID (as UUID), raw key bytes, and optional permissions for OPERATOR_SESSION keys.